A belated - nice to see this, I think an intermediate IR is the right way to gate access rather than raw SQL (full disclosure; also hacking on open-source solutions in that space) - how are you balancing expressiveness vs control? Some of the more impressive text to SQL demos rely on agents being able to do fairly complicated calculations - which it seems like IL could support - but I'm still seeing the IL example as containing some of the footguns they also hit - join type (inner/vs outer, group by etc). How are you balancing having enough safe moves to be useful, while not introducing unsafe combinations of moves?